CRYPTSETUP-LUKSCHANGEKEY(8) (NAME) cryptsetup-luksChangeKey - LUKS (SYNOPSIS) cryptsetup luksChangeKey [<>] <> [< >] (DESCRIPTION) . --key-file . . ( --key-slot) . . (overwrite) . : LUKS . LUKS2 . : LUKS2 . LUKS1 PBKDF . <> : [--key-file, --keyfile-offset, --keyfile-size, --new-keyfile-offset, --iter-time, --pbkdf, --pbkdf-force-iterations, --pbkdf-memory, --pbkdf-parallel, --new-keyfile-size, --key-slot, --force-password, --hash, --header, --disable-locks, --type, --keyslot-cipher, --keyslot-key-size, --timeout, --verify-passphrase]. (OPTIONS) --batch-mode, -q . ! --verify-passphrase . --debug --debug-json . # . --debug-json JSON LUKS2 . --disable-locks . LUKS2 . : cryptsetup ( /run ) . --force-password LUKS . cryptsetup . pwquality.conf(5) passwdqc.conf(5) . --hash, -h <_> PBKDF2 AF . --header < LUKS> () LUKS . LUKS . LUKS ( luksAddKey) LUKS LUKS . --help, -? . --iter-time, -i < > PBKDF . . --key-file, -d _ . "-" (stdin) . . --key-file . . NOTES ON PASSPHRASE PROCESSING cryptsetup(8) . --keyfile-offset . --keyfile-size, -l . --help . . (trailing newlines) . --keyfile-offset . --key-slot, -S <0-N> LUKS . LUKS . LUKS1 . LUKS2 LUKS2 . --keyslot-cipher <_> LUKS2 . --keyslot-key-size <_> LUKS2 . --new-keyfile-offset . --new-keyfile-size . --help . . --new-keyfile-offset . --pbkdf <_PBKDF> (PBKDF) LUKS. PBKDF : pbkdf2 ( PBKDF2 RFC2898) argon2i Argon2i argon2id Argon2id ( Argon2 ). LUKS1 PBKDF2 ( ). PBKDF LUKS2 cryptsetup --help . PBKDF (brute-force) . . PBKDF2 ( ) . Argon2i/id ( ) ( ) . . (--iter-time) --pbkdf-memory . . --pbkdf-parallel . PBKDF LUKS2 cryptsetup-luksDump(8) . : --pbkdf-force-iterations --pbkdf-memory --pbkdf-parallel . . (out-of-memory) . . PBKDF: PBKDF2 ( ) . PBKDF2 . Argon2i Argon2id ( CPU) . (KiB) (GiB) ( ). ( ) . ( ). --pbkdf-force-iterations <> PBKDF (). LUKS/LUKS2 . --pbkdf . --pbkdf-memory <> PBKDF ( Argon2i/id ). PBKDF . PBKDF2 . --pbkdf-parallel <> PBKDF ( ). CPU . PBKDF2 . --timeout, -t < > (timeout) . . --key-file . (). . --type <_> BASIC ACTIONS cryptsetup(8) . --usage . --verify-passphrase, -y . (stdin) . --version, -V . (REPORTING BUGS) cryptsetup . --debug . (SEE ALSO) cryptsetup (FAQ) cryptsetup(8), integritysetup(8) veritysetup(8) (CRYPTSETUP) cryptsetup . cryptsetup 2.7.5 CRYPTSETUP-LUKSCHANGEKEY(8)